{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-2313"
      ],
      "details": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.",
      "id": "GSD-2024-2313",
      "modified": "2024-03-08T06:02:43.583680Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@ubuntu.com",
        "ID": "CVE-2024-2313",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "bpftrace",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "versions": [
                              {
                                "lessThan": "v0.20.2",
                                "status": "unaffected",
                                "version": "0",
                                "versionType": "semver"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "bpftrace"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Mark Esler"
        },
        {
          "lang": "en",
          "value": "Seth Arnold"
        },
        {
          "lang": "en",
          "value": "Brendan Gregg"
        },
        {
          "lang": "en",
          "value": "Jordan Rome"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998",
            "refsource": "MISC",
            "url": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
          },
          {
            "name": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313",
            "refsource": "MISC",
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default."
          }
        ],
        "id": "CVE-2024-2313",
        "lastModified": "2024-03-11T01:32:29.610",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 2.8,
                "baseSeverity": "LOW",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.1,
              "impactScore": 1.4,
              "source": "security@ubuntu.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2024-03-10T23:15:53.760",
        "references": [
          {
            "source": "security@ubuntu.com",
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"
          },
          {
            "source": "security@ubuntu.com",
            "url": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
          }
        ],
        "sourceIdentifier": "security@ubuntu.com",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-2313 If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-2313.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.",
    "tracking": {
      "current_release_date": "2025-04-11T00:00:00.000Z",
      "generator": {
        "date": "2025-10-20T01:08:04.801Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-2313",
      "initial_release_date": "2024-03-02T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-06-30T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2025-04-11T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added bpftrace to CBL-Mariner 2.0\nAdded bpftrace to Azure Linux 3.0"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 bpftrace 0.20.3-1",
                "product": {
                  "name": "\u003cazl3 bpftrace 0.20.3-1",
                  "product_id": "3"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 bpftrace 0.20.3-1",
                "product": {
                  "name": "azl3 bpftrace 0.20.3-1",
                  "product_id": "17784"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 bpftrace 0.16.0-3",
                "product": {
                  "name": "\u003ccbl2 bpftrace 0.16.0-3",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 bpftrace 0.16.0-3",
                "product": {
                  "name": "cbl2 bpftrace 0.16.0-3",
                  "product_id": "19804"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 bpftrace 0.19.1-1",
                "product": {
                  "name": "\u003cazl3 bpftrace 0.19.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 bpftrace 0.19.1-1",
                "product": {
                  "name": "azl3 bpftrace 0.19.1-1",
                  "product_id": "19812"
                }
              }
            ],
            "category": "product_name",
            "name": "bpftrace"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 bpftrace 0.20.3-1 as a component of Azure Linux 3.0",
          "product_id": "17084-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 bpftrace 0.20.3-1 as a component of Azure Linux 3.0",
          "product_id": "17784-17084"
        },
        "product_reference": "17784",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 bpftrace 0.16.0-3 as a component of CBL Mariner 2.0",
          "product_id": "17086-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 bpftrace 0.16.0-3 as a component of CBL Mariner 2.0",
          "product_id": "19804-17086"
        },
        "product_reference": "19804",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 bpftrace 0.19.1-1 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 bpftrace 0.19.1-1 as a component of Azure Linux 3.0",
          "product_id": "19812-17084"
        },
        "product_reference": "19812",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "notes": [
        {
          "category": "general",
          "text": "canonical",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17784-17084",
          "19804-17086",
          "19812-17084"
        ],
        "known_affected": [
          "17084-3",
          "17086-2",
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2313 If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-2313.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-06-30T07:00:00.000Z",
          "details": "0.20.3-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-3",
            "17084-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2024-06-30T07:00:00.000Z",
          "details": "0.16.0-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "temporalScore": 2.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "17084-3",
            "17086-2",
            "17084-1"
          ]
        }
      ],
      "title": "If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "bpftrace-0.20.4-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the bpftrace-0.20.4-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13986",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13986-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-2313 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-2313/"
      }
    ],
    "title": "bpftrace-0.20.4-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13986-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0.20.4-1.1.aarch64",
                "product": {
                  "name": "bpftrace-0.20.4-1.1.aarch64",
                  "product_id": "bpftrace-0.20.4-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-tools-0.20.4-1.1.aarch64",
                "product": {
                  "name": "bpftrace-tools-0.20.4-1.1.aarch64",
                  "product_id": "bpftrace-tools-0.20.4-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0.20.4-1.1.ppc64le",
                "product": {
                  "name": "bpftrace-0.20.4-1.1.ppc64le",
                  "product_id": "bpftrace-0.20.4-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-tools-0.20.4-1.1.ppc64le",
                "product": {
                  "name": "bpftrace-tools-0.20.4-1.1.ppc64le",
                  "product_id": "bpftrace-tools-0.20.4-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0.20.4-1.1.s390x",
                "product": {
                  "name": "bpftrace-0.20.4-1.1.s390x",
                  "product_id": "bpftrace-0.20.4-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-tools-0.20.4-1.1.s390x",
                "product": {
                  "name": "bpftrace-tools-0.20.4-1.1.s390x",
                  "product_id": "bpftrace-tools-0.20.4-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0.20.4-1.1.x86_64",
                "product": {
                  "name": "bpftrace-0.20.4-1.1.x86_64",
                  "product_id": "bpftrace-0.20.4-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-tools-0.20.4-1.1.x86_64",
                "product": {
                  "name": "bpftrace-tools-0.20.4-1.1.x86_64",
                  "product_id": "bpftrace-tools-0.20.4-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0.20.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.aarch64"
        },
        "product_reference": "bpftrace-0.20.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0.20.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.ppc64le"
        },
        "product_reference": "bpftrace-0.20.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0.20.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.s390x"
        },
        "product_reference": "bpftrace-0.20.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0.20.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.x86_64"
        },
        "product_reference": "bpftrace-0.20.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-tools-0.20.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.aarch64"
        },
        "product_reference": "bpftrace-tools-0.20.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-tools-0.20.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.ppc64le"
        },
        "product_reference": "bpftrace-tools-0.20.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-tools-0.20.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.s390x"
        },
        "product_reference": "bpftrace-tools-0.20.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-tools-0.20.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.x86_64"
        },
        "product_reference": "bpftrace-tools-0.20.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-2313"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.aarch64",
          "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.ppc64le",
          "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.s390x",
          "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.x86_64",
          "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.aarch64",
          "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.ppc64le",
          "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.s390x",
          "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-2313",
          "url": "https://www.suse.com/security/cve/CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221220 for CVE-2024-2313",
          "url": "https://bugzilla.suse.com/1221220"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.aarch64",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.ppc64le",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.s390x",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.x86_64",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.aarch64",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.ppc64le",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.s390x",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.aarch64",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.ppc64le",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.s390x",
            "openSUSE Tumbleweed:bpftrace-0.20.4-1.1.x86_64",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.aarch64",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.ppc64le",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.s390x",
            "openSUSE Tumbleweed:bpftrace-tools-0.20.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2024-2313"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "niedrig"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux im BPFtrace- und BCC-Toolset ausnutzen, um Dateien zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3333 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3333.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3333 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3333"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory vom 2024-11-04",
        "url": "https://access.redhat.com/errata/RHSA-2024:8830"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory vom 2024-11-04",
        "url": "https://access.redhat.com/errata/RHSA-2024:8831"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-8830 vom 2024-11-06",
        "url": "https://linux.oracle.com/errata/ELSA-2024-8830.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-8831 vom 2024-11-06",
        "url": "https://linux.oracle.com/errata/ELSA-2024-8831.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9187 vom 2024-11-12",
        "url": "https://access.redhat.com/errata/RHSA-2024:9187"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9188 vom 2024-11-12",
        "url": "https://access.redhat.com/errata/RHSA-2024:9188"
      }
    ],
    "source_lang": "en-US",
    "title": "Red Hat Enterprise Linux: Schwachstellen erm\u00f6glichen Manipulation von Dateien",
    "tracking": {
      "current_release_date": "2024-11-11T23:00:00.000+00:00",
      "generator": {
        "date": "2024-11-12T12:16:28.247+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2024-3333",
      "initial_release_date": "2024-11-04T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-11-04T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-11-05T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-11-11T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "T038765",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Red Hat Enterprise Linux. Diese Fehler bestehen im BPFtrace- und BCC-Toolset aufgrund einer unsachgem\u00e4\u00dfen Validierung von Kernel-Headern beim Extrahieren, wodurch das Toolset Header aus einem tempor\u00e4ren Verzeichnis ohne ausreichende Pr\u00fcfung laden kann. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T038765",
          "T004914"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-2313"
    },
    {
      "cve": "CVE-2024-2314",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Red Hat Enterprise Linux. Diese Fehler bestehen im BPFtrace- und BCC-Toolset aufgrund einer unsachgem\u00e4\u00dfen Validierung von Kernel-Headern beim Extrahieren, wodurch das Toolset Header aus einem tempor\u00e4ren Verzeichnis ohne ausreichende Pr\u00fcfung laden kann. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T038765",
          "T004914"
        ]
      },
      "release_date": "2024-11-04T23:00:00.000+00:00",
      "title": "CVE-2024-2314"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bpftrace is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap\n\nSecurity Fix(es):\n\n* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:8830",
        "url": "https://access.redhat.com/errata/RHSA-2024:8830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "2269014",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8830.json"
      }
    ],
    "title": "Red Hat Security Advisory: bpftrace security update",
    "tracking": {
      "current_release_date": "2025-11-21T19:15:32+00:00",
      "generator": {
        "date": "2025-11-21T19:15:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2024:8830",
      "initial_release_date": "2024-11-05T00:42:00+00:00",
      "revision_history": [
        {
          "date": "2024-11-05T00:42:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-05T00:42:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T19:15:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.src",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.src",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2024-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2269014"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BPFtrace. This issue occurs when extracting kernel headers, it tries to load them from a temporary directory. This issue could allow an attacker to force bpftrace to load compromised Linux headers by placing malicious headers in the temporary directory, leading to potential security risks, unauthorized access, or system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bpftrace: unprivileged users can force loading of compromised linux headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is triggered by handling malicious input and the overall impact is considered minimal.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2269014",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-2313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313"
        }
      ],
      "release_date": "2024-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-05T00:42:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "bpftrace: unprivileged users can force loading of compromised linux headers"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bpftrace is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap\n\nSecurity Fix(es):\n\n* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9188",
        "url": "https://access.redhat.com/errata/RHSA-2024:9188"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "2269014",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
      },
      {
        "category": "external",
        "summary": "RHEL-30779",
        "url": "https://issues.redhat.com/browse/RHEL-30779"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9188.json"
      }
    ],
    "title": "Red Hat Security Advisory: bpftrace security update",
    "tracking": {
      "current_release_date": "2025-11-21T19:16:05+00:00",
      "generator": {
        "date": "2025-11-21T19:16:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2024:9188",
      "initial_release_date": "2024-11-12T08:45:50+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T08:45:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T08:45:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T19:16:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.src",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.src",
                  "product_id": "bpftrace-0:0.21.1-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2024-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2269014"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BPFtrace. This issue occurs when extracting kernel headers, it tries to load them from a temporary directory. This issue could allow an attacker to force bpftrace to load compromised Linux headers by placing malicious headers in the temporary directory, leading to potential security risks, unauthorized access, or system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bpftrace: unprivileged users can force loading of compromised linux headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is triggered by handling malicious input and the overall impact is considered minimal.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2269014",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-2313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313"
        }
      ],
      "release_date": "2024-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:45:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9188"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "bpftrace: unprivileged users can force loading of compromised linux headers"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bpftrace is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap\n\nSecurity Fix(es):\n\n* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9188",
        "url": "https://access.redhat.com/errata/RHSA-2024:9188"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "2269014",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
      },
      {
        "category": "external",
        "summary": "RHEL-30779",
        "url": "https://issues.redhat.com/browse/RHEL-30779"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9188.json"
      }
    ],
    "title": "Red Hat Security Advisory: bpftrace security update",
    "tracking": {
      "current_release_date": "2024-11-24T16:30:45+00:00",
      "generator": {
        "date": "2024-11-24T16:30:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:9188",
      "initial_release_date": "2024-11-12T08:45:50+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T08:45:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T08:45:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-24T16:30:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.src",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.src",
                  "product_id": "bpftrace-0:0.21.1-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.21.1-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.21.1-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                  "product_id": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.21.1-1.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
        },
        "product_reference": "bpftrace-debugsource-0:0.21.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2024-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2269014"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BPFtrace. This issue occurs when extracting kernel headers, it tries to load them from a temporary directory. This issue could allow an attacker to force bpftrace to load compromised Linux headers by placing malicious headers in the temporary directory, leading to potential security risks, unauthorized access, or system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bpftrace: unprivileged users can force loading of compromised linux headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is triggered by handling malicious input and the overall impact is considered minimal.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
          "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
          "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2269014",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-2313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313"
        }
      ],
      "release_date": "2024-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:45:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9188"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.src",
            "AppStream-9.5.0.GA:bpftrace-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debuginfo-0:0.21.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.s390x",
            "AppStream-9.5.0.GA:bpftrace-debugsource-0:0.21.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "bpftrace: unprivileged users can force loading of compromised linux headers"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bpftrace is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap\n\nSecurity Fix(es):\n\n* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:8830",
        "url": "https://access.redhat.com/errata/RHSA-2024:8830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "2269014",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8830.json"
      }
    ],
    "title": "Red Hat Security Advisory: bpftrace security update",
    "tracking": {
      "current_release_date": "2024-11-24T16:30:32+00:00",
      "generator": {
        "date": "2024-11-24T16:30:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:8830",
      "initial_release_date": "2024-11-05T00:42:00+00:00",
      "revision_history": [
        {
          "date": "2024-11-05T00:42:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-05T00:42:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-24T16:30:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.src",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.src",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftrace-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debugsource@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                "product": {
                  "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                  "product_id": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bpftrace-debuginfo@0.16.0-6.el8_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
        },
        "product_reference": "bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2313",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2024-03-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2269014"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BPFtrace. This issue occurs when extracting kernel headers, it tries to load them from a temporary directory. This issue could allow an attacker to force bpftrace to load compromised Linux headers by placing malicious headers in the temporary directory, leading to potential security risks, unauthorized access, or system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bpftrace: unprivileged users can force loading of compromised linux headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is triggered by handling malicious input and the overall impact is considered minimal.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2269014",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269014"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-2313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-2313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313"
        }
      ],
      "release_date": "2024-03-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-05T00:42:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.src",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debuginfo-0:0.16.0-6.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:bpftrace-debugsource-0:0.16.0-6.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "bpftrace: unprivileged users can force loading of compromised linux headers"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-2313"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-377"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-10T23:15:53Z",
    "severity": "LOW"
  },
  "details": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.",
  "id": "GHSA-ph92-w482-m4jj",
  "modified": "2024-03-11T00:30:45Z",
  "published": "2024-03-11T00:30:45Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2313"
    },
    {
      "type": "WEB",
      "url": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
    },
    {
      "type": "WEB",
      "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bpftrace:bpftrace:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E246C18F-EEDB-4C93-9879-C05CD4E99075",
              "versionEndExcluding": "0.20.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default."
    },
    {
      "lang": "es",
      "value": "Si es necesario extraer los encabezados del kernel, bpftrace intentar\u00e1 cargarlos desde un directorio temporal. Un atacante sin privilegios podr\u00eda usar esto para obligar a bcc a cargar encabezados de Linux comprometidos. Las distribuciones de Linux que proporcionan encabezados de kernel de forma predeterminada no se ven afectadas de forma predeterminada."
    }
  ],
  "id": "CVE-2024-2313",
  "lastModified": "2025-08-25T15:26:44.610",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 2.8,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.1,
        "impactScore": 1.4,
        "source": "security@ubuntu.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-03-10T23:15:53.760",
  "references": [
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"
    },
    {
      "source": "security@ubuntu.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"
    }
  ],
  "sourceIdentifier": "security@ubuntu.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-377"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}